$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: KUGcMnf7t/S/MBv7YT6FXIGOyKHcwIVUO4rDBV5F1Hc= Subject key identifier: 6E:90:35:3B:54:9C:0E:D6:F8:68:0F:AA:28:5A:97:D0:5D:95:14:B7 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 1136 Signing time: Wed 14 May 2025 19:46:19 +0000 Manifest this update: Wed 14 May 2025 19:46:18 +0000 Manifest next update: Wed 21 May 2025 19:46:18 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: zuTio+S22QXTTtBmaT7AinySo/we8OlPzfJPfMMOx54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: May 14 19:46:18 2025 GMT Not After : May 21 19:46:18 2025 GMT Subject: CN=6824f30a-4b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:0a:62:3d:8d:0d:a9:84:1b:89:41:20:be: 0b:70:10:78:5a:65:65:92:f6:23:aa:19:2a:ff:b5: 41:c5:e6:a1:fc:3c:bb:b9:53:52:03:c5:7c:31:81: e3:d5:18:b3:41:5b:63:53:cd:12:64:5c:f6:94:8b: 14:9d:ec:1b:67:6c:29:b8:60:17:21:d9:4f:7a:1c: 17:44:20:23:bc:e0:56:cb:08:0f:f9:96:a3:20:5d: ea:af:76:58:e2:76:e9:1d:94:6c:8d:0c:f4:55:60: bb:8c:85:b0:f0:bc:33:ef:df:59:86:a4:6e:5e:e9: c6:94:0d:6c:f8:8d:3f:d2:24:42:bc:1e:9e:3c:3f: eb:a7:a5:7b:18:9d:e6:e0:56:71:fb:af:3c:f4:d6: f0:18:5a:cf:7e:17:f4:8c:8f:65:88:84:f7:b5:ae: 3a:fe:cb:3f:89:92:3a:54:18:d3:e5:d3:ad:61:4b: 6d:85:2b:5c:f2:47:fb:43:6d:e3:6e:ef:31:79:3e: 5b:25:84:30:70:79:76:36:17:dc:e7:9c:4f:16:cd: 4d:ef:3c:3f:cb:2b:81:de:f9:91:a4:86:6a:38:98: 08:3c:05:60:e7:92:aa:75:42:5c:be:c9:e0:b5:a6: 2c:11:bf:6e:08:45:d5:62:4c:11:94:a9:8f:5f:e4: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:35:3B:54:9C:0E:D6:F8:68:0F:AA:28:5A:97:D0:5D:95:14:B7 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:44:45:3e:4b:65:0b:2e:b5:bf:8b:b8:06:de:b0:82:d8:8e: 42:81:6a:7c:dd:20:a5:39:2e:56:de:f1:05:eb:9d:b4:e9:ef: fc:09:2b:fb:ec:5e:94:97:81:3e:a1:4e:7d:1a:47:dc:33:de: d4:2d:96:bd:b4:8e:5d:17:bf:d3:70:9b:57:4c:37:bc:d8:70: 1f:6c:1c:ba:a7:0e:74:0c:55:89:79:7a:9a:fb:9c:de:8c:2f: a4:87:d8:cf:6c:af:07:46:1c:a7:f0:cd:ee:6a:7c:c6:83:a2: 9d:14:36:04:ec:f8:a2:3e:49:92:97:00:8b:83:56:f2:e8:a1: 37:c2:b1:a3:b6:03:a6:36:fd:03:67:80:1a:ce:32:79:56:ac: f2:20:55:98:3f:4c:9e:ce:02:32:b2:44:5f:31:46:81:dc:fb: ec:42:19:b0:03:e9:b5:ac:84:66:2c:b8:6e:96:49:70:7b:d6: 69:b2:7d:a7:78:2b:0a:64:88:fd:0f:31:88:61:ca:5e:d9:c6: c9:36:a6:3d:92:1b:c8:33:a9:c4:64:ef:b3:31:82:e9:2b:5a: 45:0f:16:86:ab:58:5e:af:38:72:79:02:05:60:4e:9b:4d:ed: 97:a3:35:33:6e:09:7d:25:ec:46:9c:ad:f4:2f:32:7e:31:16: cd:84:06:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwNTE0MTk0NjE4WhcNMjUwNTIxMTk0NjE4WjAYMRYwFAYD VQQDEw02ODI0ZjMwYS00YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HkKYj2NDamEG4lBIL4LcBB4WmVlkvYjqhkq/7VBxeah/Dy7uVNSA8V8MYHj 1RizQVtjU80SZFz2lIsUnewbZ2wpuGAXIdlPehwXRCAjvOBWywgP+ZajIF3qr3ZY 4nbpHZRsjQz0VWC7jIWw8Lwz799ZhqRuXunGlA1s+I0/0iRCvB6ePD/rp6V7GJ3m 4FZx+6889NbwGFrPfhf0jI9liIT3ta46/ss/iZI6VBjT5dOtYUtthStc8kf7Q23j bu8xeT5bJYQwcHl2Nhfc55xPFs1N7zw/yyuB3vmRpIZqOJgIPAVg55KqdUJcvsng taYsEb9uCEXVYkwRlKmPX+Q/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6QNTtU nA7W+GgPqihal9BdlRS3MB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFREU+S2ULLrW/i7gG3rCC2I5CgWp83SClOS5W3vEF65206e/8CSv7 7F6Ul4E+oU59GkfcM97ULZa9tI5dF7/TcJtXTDe82HAfbBy6pw50DFWJeXqa+5ze jC+kh9jPbK8HRhyn8M3uanzGg6KdFDYE7PiiPkmSlwCLg1by6KE3wrGjtgOmNv0D Z4AazjJ5VqzyIFWYP0yezgIyskRfMUaB3PvsQhmwA+m1rIRmLLhulklwe9Zpsn2n eCsKZIj9DzGIYcpe2cbJNqY9khvIM6nEZO+zMYLpK1pFDxaGq1herzhyeQIFYE6b Te2XozUzbgl9JexGnK30LzJ+MRbNhAZ8 -----END CERTIFICATE-----Generated at Fri May 16 03:14:57 2025 by rpki-client